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Abstract 

In this paper we define intensional models for the classical theory of 
types, thus arriving at an intensional type logic ITL. Intensional models 
generalize Henkin's general models and have a natural definition. As a 
class they do not validate the axiom of Extensionality. We give a cut-free 
sequent calculus for type theory and show completeness of this calculus 
with respect to the class of intensional models via a model existence theo- 
rem. After this we turn our attention to applications. Firstly, it is argued 
that, since ITL is truly intensional, it can be used to model ascriptions of 
propositional attitude without predicting logical omniscience. In order to 
illustrate this a small fragment of English is defined and provided with 
an ITL semantics. Secondly, it is shown that ITL models contain certain 
objects that can be identified with possible worlds. Essential elements of 
modal logic become available within classical type theory once the axiom 
of Extensionality is given up. 



1 Introduction 

The axiom scheme of Extensionality states that whenever two predicates or 
relations are coextensive they must have the same properties: 

VXY(W(X£ <-> Yx) -> \IZ{ZX -> ZY)) (1) 

Historically Extensionality has always been problematic, the main problem be- 
ing that in many areas of application, though not perhaps in the foundations 
of mathematics, the statement is simply false. This was recognized by White- 
head and Russell in Principia Mathematica 32], where intensional functions 
such as 'A believes that p' 1 or 'it is a strange coincidence that p' are discussed at 
length. However, in the introduction to the second edition (1927) of the Prin- 
cipia Whitehead and Russell (influenced by Wittgenstein's Tractatus) already 
entertain the possibility that "all functions of functions are extensional" . Thir- 
teen years later, in Church's canonical formulation of the Theory of Types, 
it is observed that axioms of Extensionality should be adopted "[i]n order to 
obtain classical real number theory (analysis)" , a wording that does not seem 
to rule out the option of not adopting them. Church's formulation of type the- 
ory was completely syntactic and axioms could be adopted or dropped at will, 
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but in Hcnkin's [2] classical proof of generalized completeness the models that 
are considered, both the "standard" models and the "general" ones, simply val- 
idate Extensionality. Although Henkin's text still allows giving up the axiom 1 
the formal set-up now effectively rules out intensional predicates and functions. 

This poses problems for those areas of application of the logic where it is 
important to distinguish between predicates that are coextensive and where 
propositions that determine the same set of possible worlds should be kept 
apart nevertheless. Linguistic semantics and Artificial Intelligence are such ap- 
plications and the problem has been dubbed one of "logical omniscience" there, 
for it is with prepositional attitudes like knowledge and belief that predicates of 
predicates and predicates of propositions most naturally arise. Is there a deep 
foundational difficulty with type theory that makes the theory adequate for one 
area of application (mathematics) but not for others? Or is it possible to come 
up with a revised and generalized semantics for the logic, in which intensional 
predicates of predicates (or intensional functions of functions) are allowed? In 
the latter case Extensionality becomes a non-logical axiom that can be added 
to the theory for the purposes of one area of application while in other areas of 
application it is not added. 

Even if one is interested in mathematical applications of type theory only 
there are good reasons to consider a generalization of its models in which Ex- 
tensionality fails. This was realized by Takahashi and Prawitz in their 
(independent, but closely related) proofs of Cut-elimination. These proofs make 
use of what Andrews £Q calls "V- complexes" , structures whose typed domains 
consist of elements (A, e), where A is a term and e is a possible extension of A. 
Clearly, two objects (A, e) and (B, e') can be distinct even if e = e'. Andrews 
uses T^-complexes to show that a certain resolution system 1Z corresponds to the 
first six axioms of Church 6 (not comprising Extensionality). 

^-complexes in themselves cannot be used as independent models for an 
intensional type theory, as their definition depends on Schutte's |26| "semi- 
valuations" , essentially sets of sentences (the "V" in "^-complex" ranges over 
semi- valuations) . Is it possible to define a stand-alone notion of general inten- 
sional model that has ^-complexes as a special case? I know of two proposals for 
such general models, both recent. The first is found in Fitting ^U], the second in 
Benzmiiller et al. [5]. In Fitting's "generalized Henkin models" abstraction may 
receive a non-standard interpretation, while in the "E-models" of Benzmiiller 
et al. it is application that may be interpreted in a non-standard way. Such 
non-standard evaluations seem unnecessary, however, and in this paper, I will 
propose a simple definition of intensional model that generalizes Henkin mod- 
els for type theory but gives all logical operations their usual semantics. The 
system of type theory interpreted with the help of these intensional models will 
be called ITL ('Intensional Type Logic'). 

The rest of the paper is organized as follows. In the following section we 
will consider some existing proposals to obtain intensionality and we will argue 

1 Henkin 1121 : The axioms of extensionality ... can be dropped if we are willing to admit 
models whose domains contain functions which are regarded as distinct even though they have 
the same value for every argument. 
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that they all have a simple pattern in common that can be used to obtain a 
general intcnsional logic. Section [3] gives the types and terms of a type theory 
in the spirit of Church |S] (but framed as a relational theory, as in Orey (23 an d 
Schutte I n section0]our notion of intensional model will be defined, with 

a corresponding notion of entailment. Section [5] introduces a cut-free Gentzen 
calculus for ITL while section [5] proves a Model Existence theorem. The proofs 
in that section all employ familiar techniques but are given as a sanity check on 
the definition of the basic modeltheoretic notions. The last two sections consider 
applications: Sectional uses the logic to provide a fragment of natural language 
with a truly intensional semantics while section[S]shows how possible worlds can 
be obtained as certain objects in intensional models. A short conclusion ends 
the paper. 

2 Informal Analysis 

Given Leibniz's principle of the identity of indistinguishables and the assumption 
that V and — > behave classically, MZ(ZX — » ZY) implies X — Y and 

VXY(Vx(Xx <-► Yx) -> X = Y) (2) 

therefore will be equivalent with Extensionality. This means that a semantics 
in which this axiom fails cannot under reasonable assumptions identify the se- 
mantic value of an expression with its extension, as \/x(Xx <-» Yx) just states 
that X and Y are co-extensive. The following is a propositional instantiation 
of J2J (with the length of x set to and X and Y instantiated as ip and ip 
respectively). 

(<p <-► ip) -> ip = ip (3) 

Here ip <-> ip expresses that tp and ip have the same truth value whereas ip = ip 
says they are the same proposition. Typically we want this scheme to fail, as 
sentences with the same truth values may be distinguishable in the sense that 
one is believed while the other is not, or that one is a strange coincidence, while 
the other is entirely expected, etc. Many propositions must therefore be allowed 
to exist, although each proposition must assume one of two truth values if we 
want to retain classicality. 

Although the semantic values of sentences cannot be equated with their 
truth values, it still seems reasonable to require that they should determine 
these truth values, while the values of expressions of higher type should likewise 
determine their extensions. If this is accepted the picture that arises is that 
logical expressions are sent to their (intensional) values by some function 7, 
while these values in their turn are connected with extensions by a function E. 
The latter typically does not need to be injective. Readers familiar with the ex- 
tensive literature on intensionality (sometimes dubbed /ij/perintensionality) will 
be aware that, while there are many divergent proposals for what intensions 
are, the pattern just sketched is well-nigh ubiquitous. Already in Frege's [TT] 
pivotal work an expression expresses a sense (the function /) while a sense in its 
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turn determines a reference (E). In modal logic, intensions are functions from 
possible worlds to extensions (let us call such functions modal intensions) and 
the function E can be viewed as application of such functions to a fixed 'actual' 
world wo ■ It is obvious that this modal strategy does not individuate intensions 
finely enough (essentially since, if W\ and W2 denote sets of possible worlds or 
the characteristic functions of such sets, Vw(Wiw <-> W2W) — > W\ = W% will 
hold) and many researchers have sought notions of intension coming with more 
fine-grained criteria of individuation than modal intensions come with. Car- 
nap @|, for example, who defined a precursor to the now usual possible worlds 
analysis of natural language, noticed the problems that this analysis suffers 
from and proposed a theory of structured meanings that was later worked out 
in Lewis and Cresswell On Lewis' account the meaning of an expression 
is a finite ordered tree having at each node a category and an appropriate modal 
intension. The modal intension at the root node of this tree is the one associated 
with the expression as a whole and so in this theory the function / assigns finite 
ordered trees of categories and modal intensions to any given expression, while 
E is the function that takes any such tree and returns Wwq, where W is the 
modal intension found at its root node. 

Another example of an approach in which the functions I and E can eas- 
ily be recognised is the theory of impossible worlds. The idea behind this line 
of thought is that if the usual set of possible worlds is not large enough to 
make enough distinctions between semantic values, extra worlds, impossible 
ones, should be added. A key point is that the logical operators need not have 
their usual meaning at these points of reference and that logical validities will 
therefore cease to hold throughout the set of all worlds. The name "impossible 
(possible) world" derives from Hintikka ^Sj) but the idea was also present in 
Montague ^H] and Cresswell [7] and has been followed up in Rantala 25 , Bar- 
wise [2], and Zalta |34|. for example. The function / here is the function that 
sends each sentence to a set of possible and impossible worlds, wheras E can be 
described as XW.Ww , as in the ordinary modal account. 

Other approaches to intensionality may have different conceptions of the na- 
ture of intensions, but will also follow a two-stage pattern in which expressions 
are first sent to their intensions (whatever these are) and intensions are subse- 
quently related to extensions. For example, in Property Theory (Turner |31|. 
Chierchia and Turner 0) one finds a homomorphism T sending an algebra of 
'information units' I to a boolean algebra P (Chierchia and Turner 0). Here 
the information units act as intensions while the elements of P are the exten- 
sions and T is the function we have called E. Thomason [3D] uses a higher-order 
logic that obeys a form of Extensionality to interpret natural language sentences 
in a domain D p of propositions considered as primitive entities and then uses 
a function u (our E) to send these propositions to their extensions (see also 
Muskens HOI)- Moschovakis 17 , to give a last example, identifies senses with 
algorithms and references with the values that these algorithms return. Here 
the function that sends expressions to algorithms is our / while E assigns to 
each algorithm the value returned. 

Thus while opinions about the nature of intensions radically diverge, all pro- 
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posals follow a simple two-stage pattern. The aim of this paper is not to add 
one more theory of intension to the proposals that have already been made, 
but is an investigation of their common underlying logic. The idea will be that 
the two-stage set-up is essentially all that is needed to obtain intensionality. 
For the purposes of logic it suffices to consider intensions as abstract objects; 
the question what intensions are, while philosophically important, can be ab- 
stracted from. Conversely, while many positions regarding the ultimate nature 
of intensions seem rationally possible and no knock-down arguments are likely 
to decide the matter, it does equally seem possible to rationally converge on 
a logic describing what intensions do. Here we attempt to contribute to that 
logic. 

3 Terms 

In this section the types and terms of ITL will be defined and some notation will 
be adopted. While this ITL syntax will be given an intensional interpretation 
in the next section, it essentially is the syntax of the simple type theory of 
Church's [H]. The intended interpretation will be relational, however, as in 
Orey [2? and Schiitte [2fi| . not functional, as in Church's original work. 

Assuming that some finite set B of basic types is given, the following defini- 
tion gives the set of types. 

Definition 1. The set T of types is the smallest set of strings such that 

1. B QT 

2. If oti,..., a n eT (n > 0) then (a>i . . . a n ) E T 

Types formed with the second clause of this definition will be called complex. 
The intended interpretation is that the extension of an object of type {a± . . . a n ) 
is an n-place relation taking objects of type oti as its i-th argument. Note that, 
as a limiting case, (} is defined to be a (complex) type; this will be the type of 
propositions, with truth values as extensions. 

A language will be a countable set of uniquely typed non-logical constants. 
If C is a language, the set of constants from C that have type a is denoted C a . 
For each a E T we moreover assume the existence of a denumerably infinite set 
V a of variables with unique type a. We let V = U Q er 

The following definition gives us terms in all types. Apart from variables 
and non-logical vocabulary there will be a sentence _L that is always false, and 
there will be application and abstraction. Furthermore, a symbol C will denote 
inclusion of extensions, so that A C B is true if the extension of A is a subset 
of that of B. 

Definition 2. Let C be a language. Define sets of terms of C of type a, 
for each a E T , as follows. 

1. L a C and V a Q T£ for each a E T 
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2. _L g 



5- //A G Tf QiQ2 Qn> and B G l£, tften (AS) G Tf Q2 Qn) 

IPe Tf Q2 Qn> and xEV ai , then (Ax. A) G an) 

5. If Ae T£ and B e Tf i/ien (A C B) G T^, i/a is comp/ex 

We will write T £ for the set of a/Z terms of the language C, i.e. for the union 
UaeT-^a ■ If ^4 is a term of type a, we may indicate this by writing A a and we 
will use (p,il>,x for terms of type () , which we call formulas. The notions free and 
bound occurrence of a variable and the notion B is free for x in A are defined 
as usual, as are closed terms and sentences. Substitutions are functions a from 
variables to terms such that cr(x) has the same type as x. If a is a substitution 
then the substitution a' such that cr'(x) = A and a'(y) = a(y) for all y ^ x is 
denoted as a[x := A]. If A is a term and a is a substitution, Aa, the extension 
of a to A, is defined in the usual way. The substitution a such that a(xi) = A4 
and <j(y) — y if y {xi, . . . ,x n } is written as {xi := A\,...,x n :— A n }. 
Parentheses in terms will often be dropped on the understanding that ABC is 
((AB)C), i.e. association is to the left. 

Our stock of operators may seem somewhat spartan, but is rich enough to 
let the usual connectives and quantifiers be defined. In particular, V, — > and = 
are easily obtained. 

Definition 3. Write 

if — > ip for Lp C -07 

T for T — » _L, 

\/xip for (Ax.T) C (Xx.ip), and 

A a = B a for Vx( a ) (xA xB). 

The operators -1, A, V, <-> and 3 are defined as usual. 

Our presentation of the logic will revolve around sequents. A signed sentence 
of C will be a pair (L, ip) (written L : ip) or a pair (R, <p) (written R: ip), such that 
<p is a sentence of C (L indicates 'left' and R indicates 'right'). A sequent of C 
is a set of signed sentences of C. Letting sequents be sets has some advantages, 
but we may also want to use a more conventional form and write II =>• S for 
{L: p I ip G 11} U {R: ip | p E S} if II and S are sets of sentences. 

4 Intensional Models 

Let us turn to the semantics of ITL, which will essentially follow the two-stage 
pattern discussed above. The following definition sets up the usual hierarchies 
of objects and provides some of the usual notation. 

Definition 4. A collection of domains will be a set {D a \ a E T} of pair wise 
disjoint non-empty sets. An assignment a for a collection of domains D = 
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{D a | a G T} is a function which has the set of variables V as domain and 
has the property that a(x) G D a if x G V a - The set of all assignments for D 
is denoted Ad- If & *s an assignment, d G D a , and x is a variable of type a, 
a[d/x] is defined by letting a[d/x](x) — d and a[d/x](y) — a{y), if y is not equal 
to x. 

Note that we have not imposed any non-trivial relations between the elements of 
any given collection of domains D. In particular we have not required domains 
D(a 1 ...a n ) to consist of relations over lower domains. This is because we need 
to tease apart the intensions and extensions of terms of complex type. While 
extensions of such terms will be certain relations, with their identity criteria 
therefore given by set membership, the intension functions defined below send 
terms to almost arbitrary domain elements. 

Definition 5. An intension function for a collection of domains D = {D a \ 
a G T} and a language £ is a function I : Ad x T c — > D such that 

1. I {a, A) G D a , if A is of type a 

2. I(a,x) = a(x), if x is a variable 

3. I (a, A) — I (a! \ A), if a and a' agree on all variables free in A 

4. I(a,A{x := B}) = I(a[I(a, B)/x], A), if B is free for x in A 

Intension functions are the formal counterpart of the functions / that were 
discussed informally above. They take an extra assignment argument in order 
to take care of free variables. 

The second part of our formalisation of the two-stage architecture discussed 
above are the extension functions of definition [S] They send objects of complex 
types to certain relations over the relevant domains. We first give very general 
constraints and will put more requirements on useful extension functions in 
definition [S] 

Definition 6. An extension function for a collection of domains D = {D a 
a G T} is a function E with domain U{D a \ a is complex} such that E(d) C 
Dai. x • • • x D an whenever d G D/ ai ^ a \ . 

The restriction of E to D a is written as E a , for any complex type a, so that 
E a : D a —* V{D ai x • • ■ x D an ) if a = {ct\ . . . a n ). 

The limiting case that n = is of some interest here. In this case the product 
D ai x ■ • • x D an equals {()}. We identify () with 0, with 0, and {0} with 1, 
so that En : Dq — > {0, 1} if En is an extension function of type () for D. Note 
that, while the range of Eq thus consists of the two standard truth-values, the 
domain Dq of propositions can have any cardinality > 2. Propositions with 
the same truth-value need not be identified and, as will become apparent, even 
propositions that receive the same truth value in all structures need not be 
identical in any given structure. 
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Definition 7. A generalized frame for the language C is a triple (D, I, E) such 
that D is a collection of domains, I is an intension function for D and C, and 
E is an extension function for D. 

We are interested in the extensions E(I(a, A a )) of terms A of complex type a. 
Let V be the composition of E and /, so that, in the interest of readability, 
we can write V(a,A), for E(I(a,A)). The following definition, which gives 
the central notion of this paper, puts constraints on intension and extension 
functions that cause terms to get their usual semantic values. 

Definition 8. A generalized frame (D,I,E) for C is an intensional model for 
Cif 

1. V(a,±) = 

2. V(a,AB) = {(d) | (I(a,B),d) € V(a,A)} 

3. V(a,Xx/3.A) = {{d,d) \ deD p and (d) e V(a[d/x],A)} 

I V(a, A c B) = 1 V(a, A) C V(a, B) 

To better understand the motivation behind the second and third clauses of 
this definition, it may help to consider that any n + 1 place relation R can be 
thought of as a unary function F such that F(d) = {(d) | (d,d) € R}. Thus 
V(a,AB) = F(I(a, B)), where F is the function corresponding to V(a,A) and 
V(a, \xp.A) corresponds to the function F such that F(d) = V(a[d/x], A) for 
each d S Dp. For further discussion of this little trick in an extensional setting 
see Muskens [T%llr3] . 

If M = (D, I, E) is an intensional model, a is an assignment for D, and tp is 
a formula, we may alternatively write M \= tp[a] for V(a,ip) = 1. In case <p is a 
sentence it makes sense to write M \= (f if M \= <p[a] for some a. The following 
facts are unsurprising but useful. 

Proposition 1. Let M — (D,I,E) be an intensional model, and let a be an 

assignment for D. Then, for all (p, ip, A, B and B' of appropriate types, 

1. V(a, ip -> if}) = iff V(a, tp) = 1 and V(a, tp) = 0; 

2. V(a,Vx a (p) = 1 iffV(a[d/x],(p) = 1 for all d E D a ; 

3. V(a, (Xx.A)B) = V(a, A{x := B}), if B is free for x in A; 
I IfV(a,A= B) = 1 then V(a, A c B) = 1; 

5. V(a,A = A) = 1; 

6. IfV(a,B = B') = 1 then V(a,A{x := B} = A{x := B'}) = 1, provided 
B and B' are free for x in A. 

Proof Left to the reader. □ 
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Note that /3-conversion preserves extensional identity, but that it does not nec- 
essarily preserve intensional identity, i.e. (Xx a .A)B — A{x :— B} is not neces- 
sarily true given the usual side condition. Similar remarks can be made about 
77-conversion and even about a-conversion. Since it is not necessary to hard- 
wire these principles into the logic, we have chosen not to do so. However, the 
principles can clearly be added to the logic by means of an axiomatic extension. 
In section below, where a linguistic application is considered, this axiomatic 
extension will be given. 

The last two statements in proposition ^ above show that = is the usual 
congruence, but intensional models may still have the undesirable property that 
= does not denote true identity of intension. This is an anomaly we want to get 
rid of. Intensional models are called normal just in case they have the desired 
property. 

Definition 9. An intensional model M = {D, I, E) is normal if, for any type 
a, any d, d' E D a , and any a, (d, d') E Via, \x a \x' a .x = x') implies d — d' . 

That a restriction to normal intensional models does not buy us any new truths 
is shown by the next proposition. Its proof uses the Axiom of Choice unless M 
is countable. 

Proposition 2. Let M be an intensional model. There is a normal intensional 
model M such that M \= if M \= if for each sentence ip. 

Proof. Suppose M = (D, I, E). Let ~ be the relation given by d ~ d! iff (d, d') E 
V(a, \x a \x' a .x = x') for any d, dl E D a and any a (where a is arbitrary). 
Clearly, ~ is an equivalence relation. Note that, by proposition^and definition 
[5J for any term A, 

d~d' => I(a[d/x],A) ~ I(a[d'/x],A) . (4) 

Define d = {d' \ d ~ d'}, let D a = (d\_ d e_Dah and let D = {D a \ a E T}. 
Let / be a function such that f(d) E d, if d £ D a . For any assignment a for 
D, let a be the assignment for D defined by a°(x) — f(a(x)), for all x. Let 
I(a, A) = I (a , A), for each assignment a for D and each term A. Then I is an 
intension function for D. The first three requirements of definition |SJ are easily 
checked, so let us check the last requirement. Note that 

I(a°,A{x := B}) = (Definition 

I{a°[I(a°,B)/x},A) - Q 

I{a[f{I{a ,B))/x]),A) = (definition of I) 

I(a°[f(l(a, B))/x\),A) = (definition of o) 
I({a[I(a,B)/x]r,A) . 

From this conclude that l(a, A{x := B}) = 7(a[7(a, B)/x),A). 

Define E by letting E(d a ) — {(di, . . . , d n ) \ {d\, d n ) E E(d)}, if a is com- 
plex. It is easy to see that this is well-defined. Since (di,.. . ,d n ) E E(I(a,A)) 
iff (di, . . . , d n ) E V(a° , A) it follows that M — (D, I, E) is an intensional model, 
M |= if <=> M \= tf for each sentence ip, and M is normal. □ 
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n s 

\wi if n c n', sc e' 

n' e' L J 

[#] — [-LL] 



il^^e,^ ii,_l=>e 

II, ^4{a; := _B}(7 => E II => E, A-fz := 51(7 
[AL] — L- [AR] 

n, (Xx.a)bc => e n =► s, (Ax.^bc* 

if £? is free for a: in A if B is free for x in A 



— ■ [C L] C R 

if the constants c are fresh 



Table 1: Gentzen rules for ITL. 



Now that the situation with respect to normality and non-normality of inten- 
sional models has become clear, we can define our semantic notion of conse- 
quence. 

Definition 10. An intensional model M for C refutes a sequent II E of C 
if M j= ip for all <p G II and M \/= tp for all ip £ £. A sequent T is i- valid if no 
intensional model for C refutes T. IT i-entails E, II (=$ E, if II =>■ E is i-valid. 

Let us take stock. We have defined a notion of intensional model following the 
two-stage pattern discussed in section|2] This is also the pattern followed in Fit- 
ting US], but we have avoided the complex "abstraction designation functions" 
that are used there but do not seem to have a justification beyond the fact that 
they are needed in proofs. Intensional models are a further generalisation of 
Henkin models in the following sense. While in intensional models the functions 

E( ai ... an ) ■ f (ai...a„) - * "P{D ai x • • ■ x D an ) 

need neither be injective nor surjective, the usual Henkin models are essentially 
obtained if an injectivity requirement is imposed. An additional requirement 
of surjectivity brings us to a variant of the so-called standard models of type 
theory. 



5 Proof Theory 

We now provide the relation of i-cntailment with what will turn out to be 
a syntactic equivalent. The rules in Table for which the usual notational 
conventions apply, constitute a Gentzen sequent calculus for ITL. If II =>■ E is 
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[TR] 

n, n^E,^ n,w=^E,v> 

— — [-» L] — — [-> R] 

n, ^ -»■ v =>• s n ^ e, </? v 

n, w{x := A} E II ^ £, </?{x c} 

— [VL] — [VR] 

n, Vxtp =4> e n =>■ Y*,\/x(p 

where c is fresh 

IM = g^E,y{:z:= A} [= R] 

II, j! = B £, ^{a; := B} II E, A = A 
where A = B is A = B ox B = A 



Table 2: Some classical rules derivable in ITL. 



a (finite or infinite) sequent, then we say that II => E is provable, U h E, if 
there are finite n C II and E C E such that n => E can be proved in this 
calculus. The following theorem states that the calculus is sound. 

Theorem 3 (Soundness). If a sequent T is provable, T is i-valid. Hence 

n h e => n |=j e 

Proof. Left to the reader. (The proof involves some observations about the 
behaviour of intension functions when the language is extended.) □ 

That the converse (generalized completeness) also holds will be shown in the 
next section. 

While the rules in Tablcnsufhcc to characterize the |=j relation, it is pleasant 
to also have the usual classical Gentzen rules for the defined connectives at one's 
disposal. These are available as derived rules. By way of example those for T, 
— >, V, and = are given in Table Given the abbreviations in definitional they 
are easily derivable from the ITL rules, as the reader may verify Note that 
in view of the correctness of these rules it seems reasonable to say that ITL is 
indeed a classical logic. 



6 Model Existence 

The purpose of this section — which could be skipped on a first reading by readers 
mainly interested in the general characteristics of our logic — is to prove Gener- 
alized Completeness and some of its friends, such as the generalized Lowenhcim- 
Skolcm and Compactness theorems. We will do this in the way Smullyan [2T| 
did it for first-order logic, via a central Model Existence theorem from which 
the desired theorems all follow as corollaries. First it will be proved that certain 
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"Hintikka" sequents, which can be thought of as resulting from a systematic 
but unsuccessful attempt to construct a Gentzen proof from the bottom up, are 
refutable. This is then used to show refutability of a wide class of sequents. 

The definition of Hintikka sequents is close to that of the "Hintikka sets" in 
Smullyan [27J and Fitting OEli but is also analogous to that of Schiitte's [2U 
semi- valuations . 

Definition 11. A sequent T of C is called a Hintikka sequent in C if the 
following hold: 

1. {L: ip, R: ip} % T for any sentence ip; 

2. L: 1 £ Y; 

3. L: (Xx.A)BC G T => L: A{x := B}C G T, if Xx.A, B, and the sequence 
of terms C are closed and of appropriate type; 

4. R: (Xx.A)BC G T =>■ R: A{x := B}C G T, if Xx.A, B, and the sequence 
of terms C are closed and of appropriate type; 

5. L: A C B G T L: BC G T or R: AC e T, for all closed A, B and 
sequences of closed C of appropriate types; 

6. R : A C B G r ==> there are constants c of appropriate types such that 
{L: Ac, R: Be} C T. 

A Hintikka sequent T in C is said to be complete if L: ip G T or R: ip G T , for 
each sentence ip of C. 

A key property of Hintikka sequents is that they are refuted by intensional 
models, as the following lemma shows. The intensional model constructed in its 
proof is closely akin to Andrews' ^-complexes. 

Lemma 4 (Hintikka Lemma). Let V be a Hintikka sequent in a language C 
such that C a ^ if a is basic. Then T is refuted by an intensional model. If T 
is complete, then T is refuted by a normal countable intensional model. 

Proof. Let T be a Hintikka sequent in the language C as described. We will 
find an intensional model refuting T using the Takahashi-Prawitz construction. 
The following induction on type complexity defines domains D a as sets of pairs 
{A, e), where A is a closed term of type a and e is called a possible extension of 
A. 

1. If a is basic let D a = {(c, c) \ c G C a }; 

2. If a = (ax . . , a n ) let (A a , e) G D a iff A is closed, e C D ai x • • • x D an 
and, whenever (Bi,e\) G D ai , . . . , (B n ,e n ) G D an 

(a) If L: ABi...B B erthen {{B 1 ,e 1 ),...,(B n ,e n )) G e; 

(b) If R : AB\ ...£>„ G r then ((B lt d), . . . , (B n , e„)) £ e. 
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It is worth observing that each D a is a function if T is complete. In that case 
each D a will be countable. 

The set D = {D a | a G T} will be the collection of domains of the refuting 
intensional model we are after. Note that, since each term has a unique type, 
the D a are pairwise disjoint. The D a are also non-empty. This follows from the 
assumption that C a ^ in case a is basic; in case a = (a\ . . . a n ) it is easy to 
show that (Xx ai . . . Xx an ._L, 0} G D a . 

We will define a function / which will turn out to be an intension function 
for D. First some handy notation. If tt is an ordered pair, write tt 1 and tt 2 for 
the first and second elements of tt respectively, so that tt = (tt 1 ,?! 2 ). If / is a 
function whose values are ordered pairs, write f 1 and f 2 for the functions with 
the same domain as /, such that f 1 (z) = (f(z)) 1 and f 2 (z) = (f(z)) 2 for any 
argument z. Let a be an assignment for D. The substitution V is defined by 
^ci(x) — a 1 (x) and we let I 1 (a, A) — A*a for any term A. The second component 
of /, is defined by letting I 2 = LUeT^ci' where the I 2 are functions such that 
I 2 : A D x Tf -» Tf if a e B and 

I 2 : A D x Tf -» 7>(£> ai x • • • x £> a J , 

if a = (ai . . . a„). The in their turn are defined using the following induction 
on the complexity of terms. 

1. I 2 (a, x a ) — a 2 {x), if a: is a variable; 
I 2 (a,c a ) = c, if a is basic; 

Il\a,cj) = {{{Ai,ei),. .. , (A„,e„)} | (A^ei) G D ai & L: cA x . . . A n G T}, 
if a = («i . . . a n ); 

2. / ( 2 ) (a,T)=0 

3. I 2 {s) (a,A {0S) Bp) = {(d) | ((/Ho.B), lj{a,B)),S) G ^ s) (a,A)} 

4. J ( 2 /35)(a; Aa;/3 A <(3) ) = | de Dp & (d) e ^(otd/a!],^)} 

5. I 2 (MCB) = 1^ I 2 (a, i4 a ) Q Ilia, B a ) 

Note that this definition does not depend on the question whether / is an in- 
tension function for D and £, and indeed the latter is not immediately obvious. 
We need to check the requirements in definition [S] That I(a,x) = a(x) for any 
variable x is immediate and that I(a, A) — I(a',A) if a and a' agree on the 
variables free in A follows by a standard property of substitutions and an easy 
induction. Suppose that B is free for x in A. Then 

I 1 (a, A{x := B}) = A{x := B} *a = A^[x := B*a] = 

A'a'lx := I l {a,B)] = Aa[I(a,B)/x] = I 1 (a[I(a, B)/x],A) . 

That I 2 {a, A{x := B}) = I 2 (a[I(a, B)/x],A) if B is free for x in A follows by a 
straightforward induction on the complexity of A which we leave to the reader. 
Thus I(a,A{x := B}) = I(a[I(a, B)/x],A) if B is free for x in A. 
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It remains to be shown that I(a, A) £ D a for any assignment a and term A of 
type a. This is done by induction on the complexity of A. That I (a, x a ) £ D a if 
a; is a variable follows from the fact that I (a, x) = a{x) and that I (a, c a ) £ D a 
if a is basic is immediate. In the remaining cases the type of A is complex 
and it suffices to prove that whenever a = (a± . . . a n ), (B±, ei) £ D ai , . . . , and 
(B n ,e n ) £ D a „: 

(a) If L: A^B 1 . . . B n £ T then d), . . . , (B n , e n » eI 2 (a,A): 

(b) If R: AaB!...B n £ V then ei), . . . , (B n , e n )) <£ I 2 (a,A). 
We shall consider each case. IH will be short for 'induction hypothesis'. 

• A a = c and a = (oti . . . a n ). The requirement follows from the definition 
of I 2 (a,c) and clause 1. of definition II II 

• A a = ± and a = (). The (a) part of the property follows from clause 2. 
of definition II II the (b) part from the fact that I 2 (a, _L) = = 0. 

• A = ■B< l 3ai...Q !n )C/3- Suppose (-Bi,ei) £ D ai ,...,{B n ,e n ) £ D an , then 

L: {BC)^Bi...B n eT 
L : B < aC < aB l ...B n eT => (IH) 
(I(a,C),(B l ,e 1 ),...,{B n ,e n )} eI 2 (a,B) (def. of 7) 

<(fli,ei>,...,<B n ,e n » £/ 2 (a,5C) 

This proves the (a) part of the case; the (b) part is similar. 

• A = (Ax Q , 1 C( Q2 ... Q , n )). Again suppose di = (Bi,ei) £ D ai ,...,d n = 
{B n , e n ) £ -D a „, and reason as follows. 

R: (Xx.C)*aB 1 ...B n £ T 

R : Xx.C < ^ x B 1 ...B n eT => Dcf. [TTJ #i is closed 
R: Co",{j; := Bi}B 2 ...B n £ T <J=> 



R: Ca[d 1 /x]B 2 ...B n eT => (IH) 
(d 2 ,...,d n ) $I 2 {a[d x /x),C) ^=> (dcf. of/) 
(dijtfc, • • • , d„) ^ 7 2 (a, Az.C) 

This proves the (b) part, which is similar to the (a) part. 

• A a = B £ C. Then a = () and B and C have some type (a\ . . . a„). Us- 
ing induction we may assume that I(a, B), I{a,C) £ Di aiot \. Suppose 
L: (Be C)*a £ T, i.e. L: B^a C CV £ T and reason as follows. 

((fli,ei),...,(B„,e n » eI 2 (a,B) (IH) 

R : B < EB 1 ...B n <£T (Def. [TTJ 

L : C qTBx . . . B n £ T (IH) 

((Bi,ei>,...,<B n>en )> £/ 2 (a,C) 
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We conclude that I 2 (a,B) C I 2 {a,C) and that I 2 (a,B C C) = 1. This 
proves the (a) part of the property. The (b) part is left to the reader. 

This concludes the proof that / is an intension function for D and C. Now 
define the function E by letting E((A,e)) — e if (A, e) € D a for any complex 
a. Clearly, E(I(a,A)) = I 2 (a,A) for any A a , E is an extension function for 
D, and M = {D, I, E) is an intensional model for the language C. It is easy to 
see that M refutes F. We have already established that M is countable if T is 
complete, and proposition [3 gives a normal intensional model refuting T which 
is countable in case F is complete. 

□ 

Before we continue with the proof of Model Existence, let us look at an applica- 
tion. Hintikka's Lemma sometimes gives an easy way of showing the refutability 
of certain sequents. For example, while standard higher order logic validates the 
sentence p = qWq = rVr = p (where p, q and r are type () constants), a Hintikka 
sequent (corresponding to an open tableau branch) shows that this is not the 
case in ITL. 

Proposition 5. p = q, q = r, r = p is refutable by an intensional model. 

Proof. The non-abbreviated form of => p = q, q = r, r = p is 

T = {R: (Az.T) C (\z.zp C zq), R: (Az.T) C (\z.zq C zr), 

R: (Az.T) C (\z.zr C zp)}, 

with z a variable of type (()). An inspection tells that the following extension 
r + of r, in which c±, ci and C3 are constants of type (()), is a Hintikka sequent. 

{R: (Az.T) C (Xz.zp C zq), L: (Az.T)c 1; R: (Xz.zp C zq)c 1 , L: T, 
R: C\p C Ciq, L: cip, R: ciq, R: (Az.T) C (Xz.zq C zr), L: (Az.T)c2, 
R: (Az.zg C zr)c 2 , R: c 2 q C c 2 r, L: c 2 q, R: c 2 r, 

R: (Az.T) C (Az.zr C zp), L: (Az.T)c3, R: (Az.zr C zp)c%, R: c^r C c^p, 
L: c 3 r, R: c 3 p} 

It follows that r + and hence T are refutable by an intensional model. □ 

This shows that it is consistent to assume that there are at least three proposi- 
tions. It is clear that the method can be generalized to show that it is consistent 
to assume a set of propositions > any given countable cardinality. If the count- 
ability restriction on languages is dropped, the existence of intensional models 
with type () domains > any given cardinality is obtained. We leave it to the 
reader to show that p <-> q p = q and other instances of Extensionality are 
refutable. 

Let us return to the main line of argument. In order to state the model 
existence theorem below, we need the notion of a provability property (closely 
related to Smullyan's |27| abstract consistency property). 

Definition 12. Let V be a set of sequents in the language C. V is a prov- 
ability property in £ if V is closed under sequent rules, i.e. ifT <EV whenever 
{Ti, . . . , F„} C V and Y\, . . . , T n /T is a sequent rule. 
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A provability property V in C is sound if no T £ V is refuted by an inten- 
sional model for C 

We now come to Model Existence itself: sequents that are not elements of 
a sound provability property (in an extended language) can be extended to 
Hintikka sequents (in that language) and are hence refutable. 

Theorem 6 (Model Existence). Let C and C be languages such that CDC = 
and each C a is denumerably infinite. Assume that V is a sound provability 
property in CUC and that T is a sequent in the language C IfT^V then V is 
refuted by a countable normal intensional model. 

Proof. Let V and Y be as described. We construct a Hintikka sequent T* such 
that F C T*. Let <&i, ...,"!?„,.. . be an enumeration of all signed sentences 
in C U C. Write for the index that the signed sentence $ obtains in this 
enumeration. Let r = L and define each L„ +1 by distinguishing the following 
cases. 

• r„+i = r„, if r„u{i?„} ev- : 

• r n+1 = T„U {i? n }, if r„ U {t? n } £ V and d n is not of the form R:4cB; 

• r„+i = r„ U {& n , L : Ac\ . . . c„ , R : Bc x . . . c„}, if L„ U {#„} £ V and 0„ = 
R: A C B for A and B of type (a± . . . a n ), where each Cj is the first 
constant in C ai which does not occur in T n U and is no clement of 

{Ci, . . . ,Ci_i} 

This is well-defined since each T n contains only a finite number of constants 
from C. That T n £ V for each n follows by a simple induction which uses 
the definition of a provability property and the fact that [c R] is a sequent 
rule. Define L* = U„r n . For all finite sets {"&ki > • • • > $k n } and for all k > 
max{k\, . . . , k n } 

ft 1 ,.,4„}cr«r l uft 1 ,...,y^ (5) 

In order to show this, let k > max{ki, . . . , k n } and let {$ki >■■■■> $fc„} £ T* . 
Then there is some £ such that {$fc l; . . . , Q Tg. Let m — max{k,£}. We 
have that Tk U {$fc l; . . . ,$k n } Q r m . Since L m ^ P and P is closed under 
supersets (rule [W]), it follows that L& U {1?/^, . . . ,$k n } £ P- For the reverse 
direction, suppose that Tfc U {$fc l; . . . , fik n } £ V . Then, since P is closed under 
supersets, Tk t U {tiki} £ P, for each of the k%. By the construction of F* each 
d kt GF* and fe,..,4Jcr*. 

With the help of (0 it can be verified that T* is a Hintikka sequent. The 
last condition of Definition ^] immediately follows from the construction of 
r*. We check condition 5, which may serve as an example for the other cases. 
Assume L: A C B G L* and let k be the maximum of i(L: i C S), i(L: B(7), 
and l(R: AC). Since, by ©, F fc U {L: A C B} £ P and since P is closed 
under sequent rules, it must be the case that either Ffc U {L: BC} £ P or 
r fe U {R: AC} £ P, Using ©, we find that L : BC G T* or R : AC £ F*. 
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We conclude that T* is refuted by an intensional model M. In order to prove 
that there is a normal countable intensional model that refutes T* and hence 
T it suffices to show that T* is complete. Let p be any sentence of L U C and 
assume that L: p V* and R: tp <£ T*. Then, by 10, r fc U {L: p} 6 V and 
Tfc U {R: p} G P, for sufficiently large fc. But M refutes Tk and therefore must 
either refute rfeU{L: p} or T^ U { R : contradicting the soundness of P. Thus 
r* is complete and some normal countable intensional model refutes T* and T. 

□ 

From model existence we can derive some nice corollaries. In the following T 
will always be a sequent in some language C while A ranges over sequents in 
£ U C, where C and C are as in the formulation of Theorem [5] 

Corollary 7 (Generalized Compactness). If T is i-valid then some finite 
Tq C-T is i-valid. 

Proof. {A | some finite Ao C A is i-valid} is a sound provability property. □ 

Corollary 8 (Generalized Lowenheim Skolem) . IfT is not i-valid then T 
is refutable by a countable normal intensional model. 

Proof. {A | A is i-valid} is a sound provability property. □ 

Corollary 9 (Generalized Completeness). If T is i-valid then T is provable. 
Hence II \= t S => II h S. 

Proof. {A | A is provable} is a sound provability property. □ 
Corollary 10 (Cut elimination). If II, ip H S and II h £,</? then II h S. 
Proof. Use soundness and completeness. □ 

7 A Linguistic Application 

We now turn to a linguistic application of ITL and will develop the semantics 
of a tiny fragment of English containing verbs of propositional attitude. It will 
be shown that, given the present logic, it is consistent for an agent a to know 
that (p without knowing that tp, even if ip and ip are co-entailing. 

Before considering our special application, however, let us address the gen- 
eral point of axiomatic extensions of the base logic. In most applications one 
will like to work with a subclass of the class of intensional models that conform 
to some set of non-logical axioms S. In that case one can define II \=$ S to 
be S U n \=i S, while II \~s S can be defined as S U n h S. Soundness and 
generalized completeness immediately give that II \=g £ <^==> n S. Not all 
applications will instantiate S in the same way, but one set of axioms that im- 
mediately come to mind, and that we shall adopt here, are the usual principles 
of A-conversion. We may add these by assuming that S contains all universal 
closures of instantiations of the following schemes. 
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WORD TRANSLATION 



WORD TRANSLATION 



if 



Ap()A(J () .p -> q 

XP' {e) XP {e) .^3x e {P'x A Px) 
XP' {e) XP {e) 3x e (P'x A Px) 
AP^AP^.Va^P'z^Px) 
XQ^ e)) Xx e .Q(Xy e .love {ee) xy) 
XQ(( e ))Xx e .Q(Xy e .x = y) 
Xp/\Xx e .know/ e Q\ xp 
XpQ Xx e .believe^ e ^ xp 



man 



man^ 
unicorn^ 



no 



unicorn 



some 



runs 




every 
loves 



laughs 



is 



Bill 
Ann 



tully {{e)) 
cicero {{e)) 



knows 
believes 



Cicero 



Tully 



Table 3: Some words and their translations 



(a) Xx.A = Xy.A{x := y}, if y is free for x in A; 

(/?) (Xx.A)B = A{x := B}, if B is free for x in A; 

(r)) Xx.Ax — A, if x is not free in A. 

As soon as these schemes are added to the base logic, the result is full intensional 
identity of (3rj equivalent terms, i.e. ^5 A = B will hold if A =p v B. 

For our linguistic application we will proceed along lines pioneered by Mon- 
tague mi! and define a small fragment of English. The words of this fragment 
are given in Table |31 along with their translations into type logic. In these 
translations the terms love, run, man, etc. are constants of the types indicated, 
where e is the type of entities. The set of syntactic structures is obtained by 
stipulating that all words in Table are syntactic structures and that [XY] is 
a syntactic structure whenever X and Y are syntactic structures. Defining syn- 
tactic structures in this way leads to a lot of gibberish along with the structures 
we are interested in, but this is not important for present purposes. As long as 
the desired structures are there and get reasonable interpretations our aim is 
served. 

Let us define the relation ~-> ("translates as") between syntactic structures 
and terms as the smallest relation such that 1) X A ii X is a. word and A is 
its translation in Table Eland 2) if X ~» A and Y ~> B then [XY] ~* AB if AB 
is a well-formed term and [XY] ~> BA if BA is well-formed. This leaves open 
the possibility that a syntactic structure does not get a translation and indeed 
many do not. Structures X for which there is no A such that X A are called 
uninterpretable and we have no interest in them. 

Let us turn to some syntactic structures that are interpretable. In Q be- 
low two are given, together with (the (3 normal forms of) their interpretations. 
Clearly, $\}p), the interpretation of Qi), i-entails and is i-entailed by (0i), which 
is the interpretation of Q:). 

(1) a. [[[no man] laughs] [if [[some unicorn] runs]]] 

b. 3x{unicorn x A run x) — > -i3x(man x A laugh x) 
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c. [[[no unicorn] runs] [if [[some man] laughs]]] 

d. 3x(man x A laugh x) — > ->3x(unicorn x A run x) 

This does not mean however that Qd) and QJi) are identical in all intensional 
models, as nothing excludes the possibility that I(a, ©)) ^ /(a, JTJi)) for some 
intension function J. It follows that the two structures in are co-entailing. 

(2) a. [[every man] [knows [[[no man] laughs] [if [[some unicorn] runs]]] j j 

b. Vy(man y — > fcnow y (3x(unicorn x A run x) — > -i3x(man x A laugh x))) 

c . [ [every man] [knows [ [ [no unicorn] runs] [if [ [some man] laughs] ] ] 

d. Vy(man y —> know y (3x(man x A laugh x) — > ->3x(unicorn x A ran x))) 

Suppose that c is some constant of type e. Then know c |Tb) =>■ A;now c |Tk) 
is in fact a Hintikka sequent and is therefore refuted by an intensional model 
(addition of (a), and (77) does not change this). This intensional model can 
also be used to show that J2t>) does not entail |0i). This is as desired, for even if 
(01) holds there may well be a man who has not managed to draw the inference 
necessary to arrive at ©). We have thus shown that the logic avoids the problem 
of logical omniscience in the sense that it does not exclude the possibility that 
a person knows one thing but fails to know another thing logically equivalent 
with it. Essential use was made of the failure of Extensionality in our logic 
ITL: terms of complex type can have the same extensions, even in all intensional 
models, without necessarily having the same intension. 

This distinction between extension and intension does not extend to terms of 
basic type however and this raises the question how names are to be dealt with. 
If they are treated straightforwardly using constants of type e (e.g. b e , or in the 
present context preferably XP.Pb, for 'Bill') we run into the standard problems 
of the 'Cicero-Tully' or 'Hesperus-Phosphorus' kind. However, there are many 
reasonable translations that do not directly equate names with type e constants. 
The translations in Table 01 that send names to constants of the quantifier type 
((e)), may serve as an example, provided some meaning postulates (additions 
to S) like the following are adopted. 

(3) a. VP(annP <-> Pa) 

b. VP (bill P <-► Pb) 

c. VP(tullyP <-> Pt) 

d. VP(cicero P <-> Pc) 

The structure [Tully runs] translates as tully run, but given the meaning pos- 
tulates just introduced, this is equivalent with run t. Similarly, [Cicero runs] 
translates as cicero run, equivalent with run c. And since [Tully [is Cicero]] 
is translated as tully (Ax. cicero (Xy.x = y)), which is equivalent with t = c, it 
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is readily explained why the argument Tally runs, Tully is Cicero, therefore 
Cicero runs holds. But this reasoning essentially depends on extensional equiv- 
alence and therefore will not go through once propositional attitudes enter the 
picture. Consider the structure [Ann [believes [Tully runs]]]. It translates as 
ann(Xx. believe x (tully run)) and this is equivalent with believe a (tully run), 
while believe a(cicero run) is equivalent with the translation of [Ann [believes 
[Cicero runs]]]. However, there is no co-entailment between these sentences, even 
in the presence of the postulates in © and the translation of [Tully [is Cicero]]. 

This shows that even for names the sense/ reference distinction can be cap- 
tured in this logic, provided one is willing to treat names with the help of 
predicates (Quine's 'primacy of predicates' comes to mind). Treating them as 
being of type ((e)), as we have done here, is one possible strategy. There may 
be others. 

The present application of our intensional type theory to linguistic semantics 
has avoided the concept of possible worlds altogether, as it was not needed in or- 
der to illustrate our points. However, as possible worlds are obviously extremely 
useful for the analysis of a range of natural language constructions (though not 
for the true intensionality we have been concerned with in this paper), one might 
well want to combine them with the present approach. Muskens |19l chapter 4] 
gives a translation of what is essentially the fragment of Montague ^jl into a 
two-sorted relational type theory, with possible worlds providing an additional 
basic type. Although the type theory in ,]3J validates Extensionality, its lan- 
guage essentially is the language employed here, so that the translation can also 
serve as a translation into ITL. A minor variation will treat names as they are 
treated above. 

8 Worlds 

ITL is a generalization of the usual formulation of type theory and intensionality 
is obtained by giving up the axiom of Extensionality, not by the introduction of 
possible worlds, as in modal logic. However, while the usual Kripke-style seman- 
tics is not known to do a very good job regarding the puzzles of intensionality 
we have been concerned with here, it does perform very well when it comes to 
modal reasoning, temporal reasoning, counterfactual reasoning etc. So it seems 
that worlds and the possibility to quantify over worlds are still welcome, even 
to those who accept the claim that the present approach to intensionality is 
superior to the modal one. 

If such a combination of modality with true intensionality is desired, one way 
to proceed would be to simply add domains of worlds to the existing intensional 
models and interpret a modal higher order language on the results, a course 
of action followed in Muskens There is, however, an easier way. Once 

true intensionality is obtained in the way it was done in this paper, worlds 
can also be constructed out of propositions, the inhabitants of the domain D/\, 
while accessibility relations can be obtained as well. The procedure will only 
be sketched in this section; more formal considerations and comparisons with 
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standard approaches to modality will be left to a future occasion. 

The idea of constructing possible worlds out of other entities is an old one. 
E.g. Wittgenstein [33] constructs them out of 'states of affairs' and Carnap 4 
takes worlds to be 'state-descriptions', maximal consistent sets of sentences. A 
recent construction of worlds from propositions can be found in Pollard |2"3) . 
Varying upon such proposals, one can identify worlds with certain objects of 
type (()) here, i.e. objects whose extensions are sets of propositions. Here is the 
construction. Assume, for simplicity, the principles (a), (/3), and (77) discussed 
above, and let Q, which will stand for the predicate 'is a world', be a fixed 
constant of type (((}}}, while w varies over objects of type ((}}. Stipulate the 
following. 

(Wl) Vw(Qw -> -niui.) 

(W2) Vw(flw -> (w{A cB)h \fx(w(Ax) -» w(Bx)))) 

The first of these axioms requires world extensions to be consistent while addi- 
tion of the second schema makes worlds distribute over logical operators. State- 
ments such as the following become derivable. 

a. yw(flw — » (w(-np) <-> -i(wtp))) 

b. yw(ftw — > (w(ip A ip) <-> ((wip) A (wip)))) 

c. \/w(Qw — > (w(\/xcp) <-> Vx(w(p))) 

d. yw(Qw — > (w(3xip) <-» =b(u></?))) 

The first of these statements says that worlds are complete, while the last two are 
'Henkin properties' that enforce, for example, that if an existential proposition 
is an element of the extension of a given world some proposition witnessing the 
existential must also be an element. In general, given (Wl) and (W2), worlds 
single out sets of propositions that could be simultaneously true. 

It is natural from this perspective to introduce a constant Wq of type (()) that 
is meant to denote the actual world, the world consisting of all propositions that 
are true (in a given intensional model). If this is wanted one should stipulate 
the following. 

a. flwo 

b. Vpq(w p p)- 

The first of these requirements merely stipulates that Wq is a world while the 
second makes it the actual world. In models additionally satisfying Exten- 
sionality, Wq is the only world in view of the fact that there are exactly two 
propositions in such models, but in other intensional models there is no such 
trivialization. Note, by the way, that nothing requires co-extensional worlds 
to be identical. The set of propositions that are true in some world does not 
necessarily determine it. 
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Since worlds are of type (()) it is possible to iterate and form propositions 
wi<p, W2(wi(p), Ws(w2(wnp)) and so on. Is it acceptable that these differ in 
truth value? Here we shall assume that this is not so and that if a proposition 
wip is true at some world, it is true at all, provided w is a world. The question 
whether a proposition is in the extension of a world should arguably be world- 
independent itself. The way to enforce this is by adopting the following axiom 
scheme. 

(W3) VW((Otu A fitu') (w(w'ip) <-> (w'ip))) 

In a similar vein, the question whether an (()) object is a world, presumably 
should also be uniform across worlds: 

(W4) Vw(n w -» Vw'(riw' «-► w(n w '))) 

We now have worlds, but we still do not have accessibility relations between 
worlds. These can be obtained, however, by considering more expressions of 
type (((}}}. If R is such an expression, it can be interpreted as the predicate 
'is accessible', and XwXw' .w(Rw') will play the role of an accessibility relation. 
The usual relational properties (transitivity, refiexivity, euclideanness,. . . ) can 
then either be stipulated or, depending on the choice of R, be shown to hold. 
For example, the universal accessibility relation XwXw' .w(Qw') is easily seen to 
be an equivalence relation on the set of worlds in view of (W4). 

A next step is the introduction of the usual modal operators. Modal boxes 
can be obtained by writing [R] for XpVw((Qw A Rw) — ► wp), so that [R]ip 
will reduce to Vw((Qw A Rw) — > wip). Diamonds are obtained as usual, as 
the duals of boxes: (R) is short for \p.-i[R]-*p. Note that if w' can be shown 
to be a world, the statement w'([R]ip), i.e. «/(Viu((f2io A Rw) — > wip)), will be 
equivalent with Vw((w' (Qw) Aw'(Rw)) — ► w'(wip)) by the distribution of worlds 
over logical operators and the last statement will in its turn be equivalent with 
Vw((n W A w'(Rw)) -> wip) by (W3) and (W4). 

Let us give another example of an accessibility relation some of whose prop- 
erties follow from its definition. The relation of belief considered in the previous 
section, XpXx. believe xp, is one of explicit belief. It is not closed under entail- 
ment or even under logical equivalence. But there is also a notion of implicit 
belief that is closed under entailment. Roughly, one implicitly believes <p if one 
rationally should believe ip given one's explicit beliefs. One way to model this 
(for some arbitrary agent john) is to consider the following property R of worlds. 

Xw Np((believe johnp <-> w (believe john p)) A (believe johnp — > wp)) 

Here a world w is accessible if John's explicit beliefs in w are exactly those that 
John actually holds and if those explicit beliefs arc in fact true in w. There 
may fail to be such worlds, for example if John's explicit beliefs are in fact 
inconsistent, a situation not ruled out by our previous considerations. But it is 
possible to stipulate that XwXw' .w(Rw') is in fact serial: 

Vw3w'Vp((w(believe johnp) <-> w' (believe john pj) A (w (believe johnp) — > w'p)) 
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Such a stipulation is simultaneously an existence requirement on worlds and a 
rationality constraint on John's beliefs. It will lead to the derivability of the 
usual D axiom, as [R]<p — > (R)<p will now hold for all ip. Note that the definition 
of R immediately gives transitivity and euclideanity of XwXw' .w(Rw'), so that 
we have, for all (p, that [R]ip — + [i?][i?]<^ and (R)(f — > [R](R)(p. These correspond 
to the usual 4 and 5 axioms. 

9 Conclusion 

In this paper we have introduced an abstract and simple notion of intensional 
model that is a generalization of Henkin's general models. Its definition does not 
involve concepts that have no immediate intuitive justification, such as the "ab- 
straction designation functions" of Fitting ^D] or the "application operators" 
of Benzmiiller et al. [3]. These operators provide generalized, non-standard no- 
tions of abstraction in one case and of application in the other, but seem to 
have no justification other than a purely technical one. The present approach, 
in contrast, gives a kind of minimal logic of intension and extension, with in- 
gredients that well-nigh any logic of intension and extension seems to need. 
Models are inhabited by intensions, a function I sends terms to their intensions 
and functions E a send intensions to the extensions they determine. If an ad- 
ditional requirement should be made that the E a be injective, one essentially 
obtains Henkin's general models, if, moreover, the i£/ Q1 ... a „) should be required 
to be onto V(D ai x • • ■ x D an ), standard models are obtained. 

The logic contrasts with other approaches to (hyper-)intensionality in two 
ways. Firstly, unlike other approaches, the aim is not to set up a new logic, 
but to provide existing classical type theory with a wider class of models in 
order to invalidate the axiom of Extensionality, which is unwanted in many 
applications. Secondly, the logic is agnostic about what intensions are. To the 
latter question various answers have been given but here we have only provided 
an abstract characterization of the notion of intensionality. We have, in other 
words, focused on the logic rather than on the ontology of intensions. 

While the logic is a generalisation of classical type theory, not an extension 
with new concepts, it turns out that there is a natural connection with the usual 
notion of modality. Intensional models may have domains of the propositional 
type () that are not isomorphic with {0, 1} and certain properties of objects 
in these domains can be identified with possible worlds. Accessibility relations 
of various kinds between such worlds are easily definable and modal box and 
diamond operators can be obtained accordingly. 
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